General
- Target jaffacakes118_f4a7120e0edf70c07281191f88e4af41eeb9e3392dde0da9c9d30718865fed7e.bin
- Size 153KB
- Sample260910-n5k7xssfja
- SHA256 f4a7120e0edf70c07281191f88e4af41eeb9e3392dde0da9c9d30718865fed7e
- MD5 485bf35ef6c731e2265a358bca78e76c
- SHA1 7b45ad51d43a7dd0d44f3208998b70e5ee073968
- SHA512 caf8b8ba628f76fb8ce136288baa064c33376978477c652bb22400a5d4e08589e5be5a6cad31b7f2573f4eb9838ec047f061bb1b2035a6afab7fe64560a04d45
- SSDEEP 3072:XaI7UlXolsaASeYu6W75Hd2D/6LGhFHyMhLM/9YwA2v:XaI4osaASeYu6c5EDCLAtyMdM/9k2v
- TLSH T1C7E34B46E6418B13C0D5277ABAEF42453323AB64D3DB73069924BFB43F8679E0E63605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_f4a7120e0edf70c07281191f88e4af41eeb9e3392dde0da9c9d30718865fed7e.bin
Resource
debian12-armhf-20260127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_f4a7120e0edf70c07281191f88e4af41eeb9e3392dde0da9c9d30718865fed7e.bin
- Size 153KB
- SHA256 f4a7120e0edf70c07281191f88e4af41eeb9e3392dde0da9c9d30718865fed7e
- MD5 485bf35ef6c731e2265a358bca78e76c
- SHA1 7b45ad51d43a7dd0d44f3208998b70e5ee073968
- SHA512 caf8b8ba628f76fb8ce136288baa064c33376978477c652bb22400a5d4e08589e5be5a6cad31b7f2573f4eb9838ec047f061bb1b2035a6afab7fe64560a04d45
- SSDEEP 3072:XaI7UlXolsaASeYu6W75Hd2D/6LGhFHyMhLM/9YwA2v:XaI4osaASeYu6c5EDCLAtyMdM/9k2v
- TLSH T1C7E34B46E6418B13C0D5277ABAEF42453323AB64D3DB73069924BFB43F8679E0E63605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.